openslides (>=2.1.0b3, <=2.1.1), openslides-votecollector (>=2.0.1, <=2.0.2) potentially affected by CVE-2022-40897 via setuptools (34.4.1)

setuptools PYPI version 34.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides =2.1.0b3, =2.0.1, =2.0.2 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

openslides (>=2.1.0b3, <=2.1.1), openslides-votecollector (>=2.0.1, <=2.0.2) potentially affected by CVE-2022-40897 via setuptools (34.4.1)

setuptools PYPI version 34.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides =2.1.0b3, =2.0.1, =2.0.2 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

CVE-2020-26280

OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...

django-crispy-contact-form (>=0.3.6, <=0.3.8), multidocs (0.1.1) +9 more potentially affected by CVE-2021-23980 via bleach (2.1.4)

bleach PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - django-crispy-contact-form =0.3.6, =2.2.0, =2.0.0, =0.5.0a2.post1, =0.4.0a5, =0.5.0 Source cves: CVE-2021-23980 Source advisory:...

django-crispy-contact-form (>=0.3.6, <=0.3.8), multidocs (0.1.1) +9 more potentially affected by CVE-2021-23980 via bleach (2.1.4)

bleach PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - django-crispy-contact-form =0.3.6, =2.2.0, =2.0.0, =0.5.0a2.post1, =0.4.0a5, =0.5.0 Source cves: CVE-2021-23980 Source advisory: OSV:PYSEC-2021-865...

Cross-site Scripting (XSS)

openslides is vulnerable to cross-site scirpting XSS. An attacker is able to inject a malicious script via various places, e.g. for personal notes or in motions and get it executed when other users read the respective text...

CVE-2020-26280

OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...

CVE-2020-26280

OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...

PYSEC-2020-72

OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...

openslides-votecollector (>=2.0.1, <=2.0.2) potentially affected by CVE-2020-26280 via openslides (2.1.1)

openslides PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on openslides and may be impacted: - openslides-votecollector =2.0.1, =2.0.2 Source cves: CVE-2020-26280 Source advisory: OSV:PYSEC-2020-72...

openslides-presenter (2.0.3), openslides-protocol (1.0.0) +1 more potentially affected by CVE-2020-26280 via openslides (2.2.0)

openslides PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on openslides and may be impacted: - openslides-presenter 2.0.3 - openslides-protocol 1.0.0 - openslides-saml 1.0.0 Source cves: CVE-2020-26280 Source advisory: OSV:PYSEC-2020-7...

Cross site scripting

OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...

PYSEC-2020-72

OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...

CVE-2020-26280

OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...

CVE-2020-26280

OpenSlides (v3.2 affected) is vulnerable to persistent cross-site scripting (XSS) due to insufficient input validation/escaping in rich-text fields. The vulnerability was introduced with commit 6eae497abeab234418dfbd9d299e831eff86ed45 and first appeared in the 3.2 release; it could allow an attac...

CVE-2020-26280 XSS in OpenSlides

OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...

CVE-2020-26280: Improper Neutralization of Input During Web Page Generation

OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...

PT-2020-16400

Name of the Vulnerable Software and Affected Versions OpenSlides version 3.2 Description OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. Due to insufficient user input validation and escaping, it is...

django-crispy-contact-form (>=0.3.6, <=0.3.8), multidocs (0.1.1) +9 more potentially affected by CVE-2020-6817 via bleach (2.1.4)

bleach PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - django-crispy-contact-form =0.3.6, =2.2.0, =2.0.0, =0.5.0a2.post1, =0.4.0a5, =0.5.0 Source cves: CVE-2020-6817 Source advisory: OSV:GHSA-VQHP-CXGC-6...

django-crispy-contact-form (>=0.3.6, <=0.3.8), multidocs (0.1.1) +9 more potentially affected by CVE-2020-6817 via bleach (2.1.4)

bleach PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - django-crispy-contact-form =0.3.6, =2.2.0, =2.0.0, =0.5.0a2.post1, =0.4.0a5, =0.5.0 Source cves: CVE-2020-6817 Source advisory: OSV:PYSEC-2020-340...